可信网络连接中一种基于可信度的细粒度授权模型

可信网络连接中一种基于可信度的细粒度授权模型 A Fine-Grained Dynamic Network Authorization Model Based on Trust Level in Trusted Connecting Network 邹冰玉 ZOU Bingyu1 1 2 first-author 张焕国 ZHANG Huanguo1 1 2 郭曦 GUO Xi1 1 2 胡颖 HU Ying1 1 2 加米拉·沙塔尔 Jamila-Sattar1 1 3 武汉大学计算机学院 武汉大学计算机学院 School of Computer,Wuhan University School of Computer,Wuhan University 武汉大学空天信息安全与可信计算教育部重点实验室 武汉大学空天信息安全与可信计算教育部重点实验室 Key Laboratory of Aerospace Information Security and Trusted Computing of Ministry of Education,Wuhan University Key Laboratory of Aerospace Information Security and Trusted Computing of Ministry of Education,Wuhan University 新疆维吾尔自治区民族语言文字工作委员会 新疆维吾尔自治区民族语言文字工作委员会 Xinjiang Uygur Autonomous Regional Working Committee of Minorities Language and Writing Xinjiang Uygur Autonomous Regional Working Committee of Minorities Language and Writing 针对可信网络连接架构中所定义的访问控制粒度粗、对于如何评估访问请求者的可信级别,如何实施授权访问没有定义等问题,提出了根据请求者的行为及其平台计算环境特征评估其信任级别的方法,研究了具有反馈功能的动态访问授权模型,并在构建可信网络连接原型系统的基础上,实现了从连接到授权的接入控制和动态调整. According to the fact that there are some problems existing in the current trusted connecting network architecture such as network access control is coarse-grained and the lack of definition of how to evaluate the trust level of the access requestor and no authorization methods available,the author proposed a method of evaluating the trust level of the access requestor by its behavior and the states of its computing platform environment,and a dynamic network access control and authorization method was studied.On the basis of implementing,the prototype system of the trusted network connecting,dynamic control and adjustment from the beginning of the connecting phase to the authorization phase of the access requestor’s endpoint to the trusted network is carried out. 可信计算 可信网络连接 可信度 访问授权模型 trusted computing trusted network connecting trust level network access control and authorization model 10.14188/j.1671-8836.2010.02.027 TP393.08 国家自然科学基金资助项目（60673071,60970115）;国家高技术研究发展计划（863）项目（2006AA01Z442,2007AA01Z411） 2010-02-01 2021-04-01 2 56